CVE Vulnerabilities - 9 March 2026

257 vulnerabilities published on 9 March 2026

Severity:

RHEL: golang-github-openprinting-ipp-usb Uncontrolled Memory Allocation

Git LFS on Red Hat Systems: Unauthenticated File Access Risk

Git Large File System (LFS) on Red Hat Systems: Data Exposure

Red Hat RHC Worker Playbook Update Fixes Security Flaw

Git Large File Storage (Git LFS) Vulnerability in Red Hat Software

Red Hat RHC Worker Playbook Updated to Fix Security Flaw

Vulnerability in Red Hat's libvpx Video Processing Library

Nordic Router Modem Crash Vulnerability: Malicious Input Causes Device Freeze

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional executi...

Unvalidated Input Crashes Network Router Modem

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional executi...

Apache NiFi Modem Crash Risk: Remote Denial of Service Possible

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional executi...

NRF Modem Remote Crash Vulnerability

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional executi...

Nordic Router Modem Crashes with Malicious Input

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional executi...

NR Modem Crashes with Malformed Input

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional executi...

WordPress Plugin nr Modem Crashes Due to Poor Input Handling

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional executi...

Apache Modem Vulnerability Allows Remote Denial of Service

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed.....

UBR's wwwupdate.cgi endpoint leaks session tokens in URLs

An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL parameters of the wwwupdate.cg...

Delta Electronics COMMGR2 Software Can Crash Under Certain Conditions

Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability....

Ivanti Endpoint Manager: Unauthenticated Credential Data Exposure

Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthentic...

VMware Workspace One UEM allows unauthenticated access to sensitive info

Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a ma...

Glances TimescaleDB Export Allows Remote Code Execution

GHSA-x46r-mf5g-xpr6 CVE-2026-30930

### Summary The TimescaleDB export module constructs SQL queries using string concatenation with unsanitized system monitoring data. The normalize() ...

Keygraph Shannon: Hard-coded API key in router configuration

Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network atta...

League Commonmark: Unfiltered HTML Injection via Malformed Markdown

UBUNTU-CVE-2026-30838

league/commonmark is a PHP Markdown parser. Prior to version 2.8.1, the DisallowedRawHtml extension can be bypassed by inserting a newline, tab, or ot...

Budibase: Malformed Shell Commands Can Execute Malicious Commands

GHSA-726g-59wr-cj4c CVE-2026-25041

Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.23.22 and earlier, the PostgreSQL integration construct...

URGENT: High-Risk Update Signature Bypass in UBR Web Interface

A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in t...

Comfast CF-AC100: Remote Attack Possible Through Malicious Ping Configuration

A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox-config?method=SET&section=pin...

8 Mar 2026 All days 10 Mar 2026